Prominence Advisors is actively seeking an Epic HB Analyst to join their team. You'll have the opportunity to help healthcare organizations solve their toughest challenges through your ability to drive strategic process improvement, manage complex projects, and solve difficult problems. You'll help strengthen our team of the best and brightest, with reputations centered on getting things done. We've won multiple awards for workplace culture and innovation, including our most recent designation as a top 10 Best Small Firm to work for by Consulting magazine. At Prominence, you'll become part of a disruptive force in the Healthcare IT space, changing your clients' expectations for the better. Your clients will value you as a true advisor, filling a strategic need. You'll use honesty and candor to consistently provide straight-forward truths and conversations with clients. Who We Are Prominence is a healthcare technology strategy and implementation firm, focused on helping the nation’s leading healthcare organizations to do more with their data. Founded by former Epic managers, we understand the technology landscape in healthcare and provide IT staffing, advisory services, and analytics solutions to create robust data ecosystems that support clinical workflows, automate operational processes, and expedite research. Whether it’s guiding a technology implementation, establishing governance principles, or developing leading edge analytics, we help our customers make sense out of the mountain of data at their fingertips in order to deliver higher quality care at a lower cost. Ranked as a best place to work over 27 times (and counting!), Prominence’s culture provides consultants with a supportive environment that allows you to innovate and grow your career in healthcare IT. Additional information is available on our website.

• Lead and evolve the company’s application security strategy, roadmap, and day-to-day operations. • Serve as the primary AppSec partner for numerous dev teams working on Ruby on Rails web apps, React Native mobile apps, and various other projects including Python and Go. • Provide security guidance during design, development, and code review for new features and projects. • Drive adoption of secure coding practices and threat-modeling across engineering teams. • Manage and optimize existing AppSec tooling. • Improve automation and integration of security tools into CI/CD pipelines. • Build and maintain secure development standards, playbooks, and training materials. • Work with DevOps to ensure secure AWS infrastructure deployments and configurations. • Lead or support investigation and remediation of application-level vulnerabilities. • Monitor, prioritize, and track findings from SAST/DAST/ASM tools.

• Be part of our Global Engineering Network! • Ensure that security is seamlessly integrated into the Software Development Lifecycle (SDLC). • Drive security initiatives from design to deployment. • Conduct advanced security assessments. • Champion a "shift-left" security culture. • Development and maintenance of a formal Secure Software Development Lifecycle (SSDLC) program. • Collaborate with architects and engineers to review feature designs, identify threats, and recommend secure alternatives. • Facilitate threat modeling sessions for new features and existing high-risk applications. • Perform advanced manual and automated penetration testing on web applications, mobile apps (iOS/Android), and APIs. • Manage, tune, and scale SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), and SCA (Software Composition Analysis) tools. • Integrate security tooling into CI/CD pipelines (e.g., Jenkins, GitLab CI, GitHub Actions) to provide rapid feedback to developers. • Triage, validate, and prioritize security findings from internal tools and external bug bounty programs. • Work with development teams to drive remediation efforts. • Participate in security incident response activities as a subject matter expert for application-level issues. • Stay up-to-date with the latest security threats, exploits, and vulnerabilities​.

Where You’ll Work Inspired by faith. Driven by innovation. Powered by humankindness. CommonSpirit Health is building a healthier future for all through its integrated health services. As one of the nation’s largest nonprofit Catholic healthcare organizations, CommonSpirit Health delivers more than 20 million patient encounters annually through more than 2,300 clinics, care sites and 137 hospital-based locations, in addition to its home-based services and virtual care offerings. CommonSpirit has more than 157,000 employees, 45,000 nurses and 25,000 physicians and advanced practice providers across 24 states and contributes more than $4.2 billion annually in charity care, community benefits and unreimbursed government programs. Together with our patients, physicians, partners, and communities, we are creating a more just, equitable, and innovative healthcare delivery system. Job Summary and Responsibilities The Epic Technical Principal Analyst creates or enhances applications that meet the needs of end-users and achieve business goals by identifying opportunities for improvement, making recommendations, then designing and implementing solutions. The Technical Principal Analyst works on several solutions at a time that tend to be of high complexity. They provide technical guidance and mentoring to application analyst teams and oversee the application analysts aspects of all projects. This includes assisting with workload distribution, support prioritization, and productivity\metric monitoring. Reviews and analyzes systems including testing and documenting Epic applications. The Principal role will operate as a front-line organizational liaison connecting IT, facilities, and other CommonSpirit operational groups to assist with developing and implementing technical solutions to increase the efficacy of the Epic system. The Principal role understands the strategic direction of both IT and CommonSpirit Health and works closely with other Principals to ensure consistency of support for enterprise initiatives. Works with technical staff, analysts, and Epic staff to build, configure, deploy, implement, operate, and maintain the Cache / IRIS database in a highly complex and fast-growing Epic environment. Ensures the reliability, security, and performance of numerous environments within the system. Responsible for performing installations, upgrades, patching and database configurations for Cache and IRIS systems, while maintaining proper documentation throughout the process. Works with all CommonSpirit teams as a resource during downtimes, failovers, updates, and upgrades. Services to include: hardware/software installation, operations, maintenance, patching, upgrades, monitoring and business continuity operations. Reviews and analyzes systems including testing and documenting Epic applications. Understands system options and configurations completely and can suggest and lead teams through decisions on the best way to configure and utilize the system. Remote eligible. Job Requirements Bachelors degree and 4 years of equivalent experience may be considered in lieu of Bachelor's degree Required experience: 5 years of relevant experience Experience with determining and documenting current workflows and designing future workflows to facilitate support. Experience in troubleshooting and resolving database integrity issues, performance issues, record locking issues, mirror replication issues, log shipping issues, connectivity issues, security issues. Preferred experience: 5 years of Epic Cache / IRIS operational database administration experience 5 years of Unix operating system administration and Unix tools operations 3 years of Red Hat (RHEL) system administration experience